Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146190.roa
File: AS146190.roa (raw, json)
Hash identifier: /j3bjaGtFylDfcw3VP4p7PqBufDltWE1o2vAnrEIIh8=
Subject key identifier: 71:80:EC:2D:DA:71:F7:3D:C4:ED:A2:31:A0:64:29:A1:97:3F:55:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3E7FE4A04F8498E2E9356DC84260696067BCDF90
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146190.roa
Signing time: Tue 26 May 2026 02:34:54 +0000
ROA not before: Tue 26 May 2026 02:29:54 +0000
ROA not after: Tue 25 May 2027 02:34:54 +0000
asID: 146190
IP address blocks: 240a:add4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:7f:e4:a0:4f:84:98:e2:e9:35:6d:c8:42:60:69:60:67:bc:df:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:54 2026 GMT
Not After : May 25 02:34:54 2027 GMT
Subject: CN=7180EC2DDA71F73DC4EDA231A06429A1973F55D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:2c:3e:e0:41:c0:b5:30:15:2a:e7:a7:f1:
29:64:2c:75:d2:27:b4:24:70:72:1f:2b:88:8c:a2:
05:0e:06:a2:c3:5a:34:b3:30:8f:d0:81:60:8d:b8:
60:de:b8:24:48:ab:9a:f7:2a:89:03:cc:92:f2:55:
6c:c0:ee:12:19:8b:05:80:c7:3d:90:b3:b1:bf:54:
16:8e:26:5e:97:44:a9:42:f7:00:e6:1c:ef:1e:6b:
08:fd:c1:26:62:6a:18:b1:99:eb:bf:19:ae:f0:19:
8c:d6:55:ec:ed:ad:ce:b0:70:32:97:10:28:ac:62:
d9:bf:bc:67:b7:8c:49:22:f4:35:66:c6:9a:33:ab:
69:27:5c:fb:60:f9:fb:c2:52:32:6e:65:2a:72:b1:
b9:57:d2:51:9f:70:42:48:5a:9d:d5:39:7e:9e:9b:
43:6a:95:2e:49:39:6c:52:34:6a:db:3d:ec:2a:17:
10:da:50:1a:60:00:79:fe:04:9b:52:85:18:bb:62:
4d:7a:e8:5e:96:ee:40:9d:ed:08:60:98:c4:6b:7f:
75:79:c4:12:28:2a:f2:8a:1c:b4:e0:08:c1:34:2a:
ba:6c:08:d2:87:70:1c:f8:e0:94:ae:ae:43:f7:6a:
fc:06:5e:19:b6:ff:ff:e3:41:ab:f3:b4:99:af:58:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:80:EC:2D:DA:71:F7:3D:C4:ED:A2:31:A0:64:29:A1:97:3F:55:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:add4::/32
Signature Algorithm: sha256WithRSAEncryption
3e:82:57:f3:d3:e4:4e:db:12:d3:29:df:72:c1:51:75:32:f4:
ec:c9:b0:6e:86:53:20:82:87:9c:98:e1:2e:8b:c2:90:22:1f:
51:00:51:c7:94:d0:98:16:8a:b6:9f:61:3d:93:ed:09:7a:a4:
44:90:7d:c0:41:53:c7:5b:93:df:5c:d4:fc:e4:93:38:0b:06:
e4:e0:f7:b1:bb:a0:b3:82:77:b1:d4:15:25:e9:4d:45:65:df:
5f:fc:60:a9:04:e1:17:5e:41:dd:8a:39:d3:57:f7:37:21:7f:
a2:23:ed:2f:62:37:fb:6e:0a:d3:e8:b5:39:3f:f4:87:03:23:
63:72:e6:d3:65:df:bc:e6:c9:48:16:6e:e4:53:93:df:34:53:
80:aa:25:e6:d6:2d:51:6b:cb:ae:16:a4:d9:a6:2a:50:aa:cc:
bb:9d:15:3e:36:40:7f:34:26:da:f8:99:c9:a7:b3:cb:66:31:
93:6c:58:eb:1c:b8:eb:9f:d9:48:42:0c:38:1c:da:4f:75:db:
4b:77:e4:ee:14:81:21:e6:6b:93:18:93:71:90:d5:69:a0:51:
5a:e0:17:78:68:3b:dd:6c:80:82:31:71:d2:76:f7:c6:a3:a2:
1f:92:58:0e:90:d3:dd:0a:a8:8c:fc:ef:60:52:27:46:c1:1c:
0a:5b:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:50 2026 by rpki-client